ITU!MSW-F.docx · Web view- 4 - - 10 - - 17 - - 9 - - 11 - Place des Nations. Téléphone +41 22 730 51 11. Télex 421 000 uit ch. E-mail:[email protected]. CH-1211 Genève 20. TéléfaxGr3:+41

Bureau de la normalisationdes télécommunications

Genève, le 27 mai 2013

Réf.: Lettre collective TSB 2/17

Tél.: +41 22 730 5866Fax:E-mail:

+41 22 730 [email protected]

– Aux administrations des Etats Membres de l'Union;

– aux Membres du Secteur UIT-T;– aux Associés de l'UIT-T participant aux

travaux de la Commission d'études 17;– aux établissements universitaires participant

aux travaux de l'UIT-T

Objet: Réunion de la Commission d'études 17;Genève, 24 août - 4 septembre 2013

Madame, Monsieur,

Conformément aux décisions prises par la Commission d'études 17 (Sécurité), j'ai l'honneur de vous inviter à participer à la réunion de cette Commission d'études qui aura lieu à Genève, au siège de l'UIT, du 26 août au 4 septembre 2013 inclus.

Je vous informe que la réunion s'ouvrira à 9 h 30 le premier jour. L'enregistrement des participants débutera à 8 h 30 à l'entrée Montbrillant. Les précisions relatives aux salles de réunion seront affichées sur les écrans placés aux entrées du siège de l'UIT et publiées sur la page web de la Commission d'études. Des renseignements complémentaires sur la réunion sont donnés dans l'Annexe A.

Le projet d'ordre du jour de la réunion, établi en accord avec le Président (M. Arkadiy Kremer, Fédération de Russie) et l'équipe de direction de la Commission d'études, figure dans l'Annexe B. Le projet de calendrier, établi par le Président et les Rapporteurs de la Commission d'études 17, figure dans l'Annexe C. Le projet de programme de travail concernant les groupes de travail et les Questions, tels qu'élaborés par les Présidents des groupes de travail et les Rapporteurs dont la candidature est proposée, figurent dans l'Annexe D.

Je vous souhaite une réunion constructive et agréable.

Veuillez agréer, Madame, Monsieur, l'assurance de ma considération distinguée.

Place des Nations Téléphone +41 22 730 51 11 Télex 421 000 uit ch E-mail:

[email protected] Genève 20 Téléfax Gr3: +41 22 733 72 56 Télégramme ITU

GENEVEwww.itu.int

Suisse Gr4: +41 22 730 65 00

mailto:[email protected]

- 2 -

Malcolm JohnsonDirecteur du Bureau de lanormalisation des télécommunications

Annexes: 4

ANNEXE ARenseignements complémentaires sur la réunion

PRÉSENTATION DES CONTRIBUTIONS

DÉLAI DE SOUMISSION DES CONTRIBUTIONS: Le délai pour la soumission des contributions est de 12 (douze) jours calendaires avant la tenue de la réunion. Ces contributions, qui seront publiées sur le site web de la Commission d'études 17, devront donc parvenir au TSB le 14 août 2013 (23 h 59 heure d'été d'Europe centrale) au plus tard. Les contributions reçues huit semaines au moins avant le début de la réunion pourront être traduites sur demande.

POSTAGE DIRECT/SOUMISSION DES DOCUMENTS: Il existe maintenant un système de postage direct des contributions en ligne. Ce système permet aux Membres de l'UIT-T de réserver des numéros de contribution et de charger ou modifier les contributions directement sur le serveur web de l'UIT-T. Vous trouverez de plus amples informations et des indications sur ce nouveau système de postage direct à l'adresse suivante: http://itu.int/net/ITU-T/ddp/. En cas de problème concernant la soumission des documents, veuillez vous adresser au Secrétariat de la Commission d'études à l'adresse [email protected].

GABARITS: Pour élaborer votre contribution, veuillez utiliser l'ensemble de gabarits (templates) mis à votre disposition. Ces gabarits sont accessibles sur la page web de chaque commission d'études de l'UIT-T, sous "Delegate resources"(http://www.itu.int/ITU-T/studygroups/templates). Le nom de la personne à contacter au sujet de la contribution, ses numéros de télécopie et de téléphone ainsi que son adresse électronique doivent figurer sur la page de couverture de tous les documents.

MÉTHODES DE TRAVAIL ET INSTALLATIONS

L'INTERPRÉTATION sera assurée sur demande pour la séance plénière d'ouverture et de clôture de la réunion. Pour les séances prévues avec interprétation, veuillez noter que celle-ci ne sera assurée que si un Etat Membre en fait la demande, en cochant la case correspondante sur le formulaire d'inscription ou en envoyant une demande par écrit au TSB, six semaines au moins avant le premier jour de la réunion. Il est impératif que ce délai soit respecté pour que le TSB puisse prendre les dispositions nécessaires.

RÉUNIONS SANS PAPIER: La réunion de la Commission d'études 17 se déroulera sans document papier.

PRÊT D'ORDINATEURS PORTABLES: Le Service desk de l'UIT ([email protected]) a prévu un nombre limité d'ordinateurs portables, prêtés dans l'ordre des demandes aux délégués qui n'en ont pas.

RÉSEAU LOCAL SANS FIL (WLAN): Des équipements de réseau local sans fil sont à la disposition des délégués dans toutes les salles de réunion de l'UIT et dans le bâtiment du CICG (Centre international de conférences de Genève). Vous trouverez de plus amples renseignements sur le site web de l'UIT-T (http://www.itu.int/ITU-T/edh/faqs-support.html).

IMPRIMANTES: Des imprimantes sont mises à disposition au cybercafé situé au deuxième sous-sol de la Tour, au rez-de-chaussée du bâtiment Montbrillant et près des principales salles de réunion.

ITU-T\COM-T\COM17\COLL\002F.DOC

http://www.itu.int/ITU-T/edh/faqs-support.html


http://www.itu.int/ITU-T/studygroups/templates/index.html


http://itu.int/net/ITU-T/ddp/

- 3 -

IMPRESSION PAR COURRIER ÉLECTRONIQUE: Outre la méthode d'impression classique, employant les files d'attente, qui nécessite une installation sur l'ordinateur ou le dispositif de l'utilisateur, l'impression de documents par courrier électronique est maintenant possible ("e-print"). La procédure consiste simplement à joindre les documents à imprimer à un message électronique et à envoyer celui-ci à l'adresse électronique de l'imprimante (de la forme [email protected]). Aucune installation de pilote n'est nécessaire. Pour plus de précisions, veuillez consulter l'adresse suivante: http://itu.int/ITU-T/go/e-print.

Des CONSIGNES électroniques sont mises à disposition au rez-de-chaussée du bâtiment Montbrillant. Le casier s'ouvre et se ferme au moyen de votre badge RFID de l'UIT. Votre casier n'est disponible que pendant la durée de la réunion à laquelle vous participez; veuillez donc le libérer avant 23 h 59 le dernier jour de la réunion.

INSCRIPTION, NOUVEAUX DÉLÉGUÉS et BOURSES

INSCRIPTION: Afin de permettre au TSB de prendre les dispositions nécessaires, je vous saurais gré de bien vouloir lui faire parvenir par lettre, par télécopie (+41 22 730 5853) ou par courrier électronique ([email protected]) au plus tard le 15 juillet 2013, la liste des personnes qui représenteront votre Administration, Membre de Secteur, Associé, établissement universitaire, organisation régionale et/ou internationale ou autre entité. Les administrations sont invitées à indiquer également le nom du Chef de délégation (et du Chef adjoint, le cas échéant).

Veuillez noter que la préinscription des participants aux réunions de l'UIT-T se fait en ligne sur le site web de l'UIT-T (http://www.itu.int/ITU-T/studygroups/com17).

Les NOUVEAUX DÉLÉGUÉS sont invités à suivre un PROGRAMME DE MENTORAT comprenant une séance d'accueil et d'information après l'enregistrement, une visite guidée des locaux du siège de l'UIT et une présentation de l'UIT-T. Veuillez cocher la case voulue sur le formulaire d'inscription en ligne si vous souhaitez en bénéficier ou nous contacter à l'adresse [email protected].

BOURSES: En raison de restrictions budgétaires, seules des bourses partielles seront accordées aux administrations remplissant les conditions requises, afin de faciliter la participation des pays les moins avancés ou des pays en développement à faible revenu (http://itu.int/en/ITU-T/info/Pages/resources.aspx). Toute demande de bourse doit être agréée par l'Administration concernée de l'Etat Membre de l'UIT. Les demandes de bourses (établies à l'aide du Formulaire 1 ci-joint) doivent être retournées à l'UIT au plus tard le 15 juillet 2013. Veuillez noter que la décision d'accorder ou non une bourse est prise sur la base des critères suivants : disponibilité d'un budget au TSB; contributions présentées par le demandeur à la réunion; répartition équitable entre les pays et régions; et égalité hommes-femmes.

Huit semaines avant la réunion:

1er juillet 2013 – soumission des contributions dont la traduction est demandée

Six semaines avant la réunion:

15 juillet 2013 – demandes de bourses– demandes de services d'interprétation pour la séance

plénière d'ouverture et/ou de clôture– demandes de visas

Quatre semaines avant la réunion:

29 juillet 2013 – préinscription

12 jours calendaires avant la réunion:

14 août 2013 – dernier délai pour la soumission des contributions


http://itu.int/en/ITU-T/info/Pages/resources.aspx



http://www.itu.int/ITU-T/studygroups/com17


http://itu.int/ITU-T/go/e-print


- 4 -

SÉJOUR À GENÈVE: HÔTELS ET VISAS

HÔTELS: A toutes fins utiles, vous trouverez un formulaire de réservation d'hôtel (Formulaire 2). Une liste des hôtels est donnée à l'adresse: http://www.itu.int/travel/.

VISAS: Nous vous rappelons que pour les ressortissants de certains pays, l'entrée et le séjour sur le territoire de la Suisse sont soumis à l'obtention d'un visa. Ce visa doit être demandé au moins six (6) semaines avant le début de la réunion et obtenu auprès de la représentation de la Suisse (ambassade ou consulat) dans votre pays ou, à défaut, dans le pays le plus proche de votre pays de départ. En cas de problème, l'Union peut, sur demande officielle de l'administration ou de l'entité que vous représentez, intervenir auprès des autorités suisses compétentes pour faciliter l'émission du visa mais uniquement pendant la période de six semaines susmentionnée. Cette demande doit préciser le nom et les fonctions, la date de naissance, le numéro ainsi que la date de délivrance et d'expiration du passeport de la (des) personne(s) pour laquelle (lesquelles) le (les) visa(s) est (sont) demandé(s)1, et être accompagnée d'une copie de la notification de confirmation d'inscription approuvée pour la réunion en question de l'UIT-T. Elle doit être envoyée au TSB, avec la mention "demande de visa", par télécopie (N°: +41 22 730 5853) ou par courrier électronique ([email protected]).

1 Un modèle de demande est disponible à l'adresse: http://itu.int/en/ITU-T/info/Documents/Visa-support-letter_MODEL.pdf.



http://itu.int/en/ITU-T/info/Documents/Visa-support-letter_MODEL.pdf

http://itu.int/en/ITU-T/info/Documents/Visa-support-letter_MODEL.pdf

http://www.itu.int/travel/

- 5 -

FORM 1 – FELLOWSHIP REQUEST

(to TSB Collective letter 2/17)

ITU-T Study Group 17 meetingGeneva, Switzerland, 26 August – 4 September 2013

Please return to: ITUGeneva, Switzerland

E-mail: [email protected]: +41 22 730 5227Fax: +41 22 730 5778

Request for one partial fellowship to be submitted before 15 July 2013

Submission of Contributions is encouraged Participation of women is encouragedRegistration Confirmation I.D. No: ……………………………………………………………………………(Note: It is imperative for fellowship holders to pre-register via the online registration form at: http://itu.int/ITU-T/go/sg17)

Country: _____________________________________________________________________________________________________

Name of the Administration or Organization: ______________________________________________________________________

Mr. / Ms. _______________________________________(family name)_______________________________________(given name)

Title: ____________________________________________________________________________________________________

Address: ____________________________________________________________________________________________________

______________________________________________________________________________________________________________

Tel.: ____________________________ Fax:_____________________________ E-Mail:_________________________________

PASSPORT INFORMATION :

Date of birth: _______________________________________________________________________________________________

Nationality: __________________________________________ Passport number: ________________________________________

Date of issue: ___________________ In (place)_: _____________________________Valid until (date): _______________________

Please select your preference (which ITU will do its best to accommodate)

□ Economy class air ticket (duty station / Geneva / duty station)□ Daily subsistence allowance intended to cover accommodation, meals & misc. expenses.

Signature of fellowship candidate: Date:

TO VALIDATE FELLOWSHIP REQUEST, NAME, TITLE AND SIGNATURE OF CERTIFYING OFFICIAL DESIGNATING PARTICIPANT MUST BE COMPLETED BELOW WITH OFFICIAL STAMP.

N.B. IT IS IMPERATIVE THAT FELLOWS BE PRESENT FROM THE FIRST DAY TO THE END OF THE MEETING.

SignatureDate


http://itu.int/ITU-T/go/sg17


- 7 -

FORM 2 – HOTELS

(to TSB Collective letter 2/17)

This confirmation form should be sent directly to the hotel of your choice

INTERNATIONAL TELECOMMUNICATION UNION

TELECOMMUNICATION STANDARDIZATION SECTOR

SG17 meeting from 26 August to 4 September 2013 in Geneva

Confirmation of the reservation made on (date) ------------------------- with (hotel) --------------------------------

at the ITU preferential tariff

------------ single/double room(s)

arriving on (date) --------------------------- at (time) ------------- departing on (date) -------------------------------

GENEVA TRANSPORT CARD : Hotels and residences in the canton of Geneva now provide a free "Geneva Transport Card" valid for the duration of the stay. This card will give you free access to Geneva public transport, including buses, trams, boats and trains as far as Versoix and the airport.

Family name -------------------------------------------------------------------------------------------------------------------

First name ------------------------------------------------------------------------------------------------------------------

Address ------------------------------------------------------------------------ Tel: -------------------------------

----------------------------------------------------------------------------------------- Fax: -------------------------------

----------------------------------------------------------------------------------------- E-mail: ------------------------------

Credit card to guarantee this reservation: AX/VISA/DINERS/EC (or other) -----------------------------------

No. -------------------------------------------------------- valid until -------------------------------------------------

Date ------------------------------------------------------ Signature ---------------------------------------------------


- 9 -

ANNEX BDraft agenda for the plenary

Meeting of Study Group 17Geneva, 26 August – 4 September 2013

1. Opening of the meeting and welcome2. Results from the last meeting of Study Group 17

a) Report of the 17 – 26 April 2013 Study Group 17 meetingb) Result of Recommendations consented under AAPc) Result of the Member States consultation for Recommendations under TAPd) Reports of the interim Rapporteur group meetingse) Reports from the Correspondence Groups on:

i) Verification process for cryptographic protocolsii) Cybersecurity Information Exchange Capabilitiesiii) Web mashup security activitiesiv) XACML (eXtensible Access Control Markup Language) activitiesv) High-level security framework for cloud computing and cloud computing security

collaborationvi) Generic IdM interoperability mechanisms activitiesvii) IdM requirement in cloud computing activitiesviii) Open identity trust framework activities.

f) SG17 participation in workshops and seminars3. Coordination, collaboration and cooperation

a) Highlights from TSAG meeting (4 – 7 June 2013) concerning Study Group 17b) Highlights from GSC-17 meeting (13 – 16 May 2013)c) Focus groups (FGs), joint coordination activities (JCAs) and Global standards initiatives

(GSIs)d) Relations with other lead study groupse) Strategic Advisory Group on Security (SAG-S) (IEC, ISO, ITU-T)f) Memorandum of Understanding on e-business (IEC, ISO, ITU-T, UN/ECE)g) Collaboration with ISO/IEC JTC 1h) Collaboration with IETFi) Collaboration with ETSIj) Collaboration with the SDL Forum Societyk) Collaboration with the Kantara Initiativel) Collaboration with OASISm) Collaboration with FIRSTn) Collaboration with Cloud Security Allianceo) Interaction with other industry consortia and forap) Reports on other liaison and collaboration activities

4. General mattersa) SG17 organization for this meetingb) Newcomers' orientation sessions


- 10 -

c) Appointments (to fill open positions)d) SG17 lead study group activitiese) SG17 activities in support of WTSA-12 Resolutions, PP-10 Resolutions and WTDC-10

Resolutionsf) Status of SG17 Projectsg) Tutorials for this meetingh) Future SG17 organized outreach events (workshops, summits, seminars)i) Bridging the Standardisation Gap (BSG)

i) Technical assistance in implementing ITU-T Recommendations in developing countries

ii) Report of Mentoriii) Report of Regional Group meetings specifying measures taken for BSGiv) Proposals on hosting BSG events or capacity building on ITU-T

Recommendations in developing countriesv) Report of Vice Chairmen on mobilization programme (Ref.: WTSA-12Res. 44)vi) Organization of webinars relevant to developing countries, an opportunity for

organizations to present their solutionsvii) Contributions of articles to Standards Q&A forum – experts feed the forum with

Q&A5. Program for this meeting (working party meetings and meeting on Questions)

a) Meeting reports including action plansb) Recommendations and other texts for approval at this Study Group 17 meetingc) Recommendations for consent or determination at this Study Group 17 meetingd) Recommendations planned for consent or determination at the next Study Group 17

meetinge) Recommendations planned for consent or determination later in the study periodf) Manuals, roadmaps and wikisg) Liaison statementsh) Summaries of Recommendationsi) New work items and work items to be removed from the work programmej) Planned Rapporteur group meetings, correspondence groups and other activitiesk) Highlights of achievements

6. Working arrangements for this meetinga) Update on tools available for the conduct of the workb) Mailing lists, including e-mail addressesc) List of meeting documents and allocation of documents to Questionsd) Meeting schedule and room allocation

7. Future meetings of Study Group 178. Information from vice-chairmen and working party chairmen9. Any other business10. Closing


- 11 -

ANNEX CDraft Timetable

Meeting of Study Group 17Geneva, 26 August – 4 September

Provisional work plan for ITU-T Study Group 17 meeting, Geneva, 26 August – 4 September 2013 1 (Status: 20 May 2013)

1st week SUN 25 August MON 26 August TUE 27 August WED 28 August THU 29 August FRI 30 August

AM PM AM PM AM PM AM PM AM PM

Quarter 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5

PLEN X WP1/17 X5

Q1/17 X X X X X X7 X X X X

Q2/17 X X X X X7 X12 X X

Q3/17 X X X X X X X17 X X7 X15 X12 X X X X X X

WP2/17 X5

Q4/17 X X X13 X X11 X X X X X X7 X X X X X X X X

Q5/17 X X X11 X X X X7 X X

WP3/17 X5

Q8/17 X X X X X X X X X X X7 X15 X

Q10/17 X14 X14 X17 X7 X X X X X X X X

WP4/17 X5

Q6/17 X X X X X X X X7 X X X X

Q7/17 X X X X X14 X14 X X X7 X X X X X X X X

Q9/17 X7 X X X X X X X X

WP5/17 X5

Q11/17 X X X13 X X X X X X X X7 X X X X X X X X

Q12/17 X7

JCAX8

(IdM)

X8

(IdM)

Tutorial XT1 XT2 XT3 XT4 XT5

OtherX MGT6

X4 X10 X3


- 12 -


2nd week SUN 1 September MON 2 September TUE 3 September WED 4 September

AM PM AM PM AM PM AM PM

Quarter 1 2 3 4 5 0 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5

PLEN X X X X WP1/17 X5 X5 X5 X5 X5

Q1/17 X

Q2/17 X X

Q3/17 X X X X

WP2/17 X5 X5 X5 X5 X5

Q4/17 X X X X

Q5/17 X X X X

WP3/17 X5 X5 X5 X5

Q8/17 X X X X

Q10/17 X X X X

WP4/17 X5 X5 X5 X5

Q6/17 X X X X

Q7/17 X X X X

Q9/17 X X X X

WP5/17 X5 X5 X5 X5

Q11/17 X X X X

Q12/17 X X

JCA

Tutorial XT6

Other

X MGT6

)

- 13 -

PLEN = Study group 17 plenary sessions; WP = Working party plenary sessions; Tn = Tutorial; Pop = room Popov; M04b in basement of Montbrillant building Teleconference facilities provided for the session; webcastX = room to be assignedQUARTER 1: 09:30 – 10:45; QUARTER 2: 11:15 – 12:30; QUARTER 3: 14:30 – 15:45; QUARTER 4: 16:15 – 17:45; QUARTER 5: 1800 – 19:30

1) This table will be updated as necessary; find updated work plan under “Meeting information” on SG17 web page2) Tutorial sessions will be scheduled during the SG17 meeting. Details will be provided on the SG17 website3) SG17 welcome reception and social networking event (sponsored by tbd), THU 29 August, 18:00-19:30, ITU Montbrillant restaurant4) Welcome of new SG17 participants and tour of ITU premises; MON 26 August 2013, 8:45-9:30, Emile Bourne Armour-Heselton/TSB;

meeting place: reception desk/Montbrillant building.5) Working party plenary sessions will be run in sequence6) Open, extended SG17 management meeting

SUN 25 August 2013, 16:00 - 18:00 hours; with GotoMeeting w. VoIP +PSTNSUN 1 September 2013, 16:00 - 18:00 hours; with GotoMeeting w. VoIP +PSTN

7) SG17 internal coordination; WED 28 August 2013, 5th Quarter; (chaired by Mohamed Elhaj)8) JCA-IdM, 27 August 2013, 14:30 – 16:30; integrated GotoMeeting w. VoIP+PSTN,

Q10/17 participants usually attend this meeting9) Void10) Special session on revision of Question texts; MON 26 August 2013, 18:00 – 19:30 (chaired by Patrick Mwesigwa)11) Joint session of Q4/17 and Q5/17, TUE 27 August 2013, 3rd quarter12) Joint session of Q2/17 and Q3/17 on X.Suppl. X.mgv6, THU 29 August 2013, 2nd quarter13) Joint session of Q4/17 and Q11/17 on CAP, TUE 27 August 2013, 1st quarter14) Joint session of Q7/17 and Q10/17 on XACML3.0, TUE 27 April 2013, 1st and 2nd quarter15) Joint session of Q3/17 and Q8/17, THU 29 August 2013, 1st quarter17) Joint session of Q3/17 and Q10/17, WED 28 August 2013, 3rd quarter

T1) Tutorial: “SG17 Orientation session for newcomers & Newcomer's discussion with SG17 management”, MON 26 August 2013, 13:30 – 14:30; Arkadiy Kremer, SG17 Chairman, SG17 Vice chairsT2) Tutorial: “”, TUE 27 August 2013, 13:30 – 14:30T3) Tutorial: “”, WED 28 August 2013, 13:30 – 14:30T4) Tutorial: “”, THU 29 August 2013, 13:30 – 14:30,T5) Tutorial: “”, FRI 30 August 2013, 13:30 – 14:30T6) Tutorial: “Conformance & Interoperability”, MON 2 September 2013, 13:30 – 14:30, Denis Andreev/TSB


- 14 -

ANNEX D(to TSB Collective letter 2/17)

Draft work programme for working parties and Questions

Working Party 1/17 - Fundamental security- Review and approve results from interim activities- Progress tasks related to implementation of WTSA-12 Resolutions, e.g., Res. 7, 11, 50, 58, 64- Perform the lead study group (LSG) responsibilities for security, including updating the LSG

information on the SG17 web page- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17

Question 1/17 - Telecommunication/ICT security coordination- Review results of activities since the April 2013 Study Group 17 meeting- Review report of the Correspondence Group on:

- Verification process for cryptographic protocols- Review results of trial on informal guidelines for Correspondence Group reports and update

guidelines as appropriate- Act as primary SG17 contact for telecommunication/ICT security coordination matters- Maintain and update the ICT Security Standards Roadmap- Maintain and update the ITU-T Security Compendia- Assist and provide input to TSB in maintaining the Security Manual and increasing its benefits- Assist in identification of gaps in telecommunication/ICT security standards work and promote

efforts to address those gaps- Provide guidance on implementation of telecommunication/ICT security standards- Promote cooperation and collaboration between groups working on telecommunication/ICT

security standards development- Review Recommendations and liaisons from other study groups and SDOs as appropriate to

assess security coordination implications- Assist in efforts to ensure effective security coordination where necessary- Help direct liaisons from external groups to appropriate study groups in ITU-T- Take ITU-T lead in organizing and planning security workshops and seminars as appropriate- Ensure effective and efficient participation in security coordination efforts with other

organizations- Achieve effective and efficient participation in security coordination efforts within SG17 to

ensure the SG17 work programme reflects the current SG17 security activities and addresses the concerns of the ITU-T membership

- Progress the definition of a strategy for security standardization (top-down approach)- Review all ITU-T study group Questions to identify those with security related subjects and

establish liaisons- Review results from the security coordination team on improving security coordination- Prepare material to promote ITU-T security work and attract additional participation (brochures,

presentation slides, etc.)- Perform the lead study group (LSG) responsibilities for security, including updating the LSG

web page- Consider needs for further action related to ISO/IEC/ITU-T Strategic Advisory Group on

Security (SAG-S)ITU-T\COM-T\COM17\COLL\002F.DOC

- 15 -

- Consider efficient collaboration with other bodies including ISO/IEC JTC 1/SCs, 3GPP, 3GPP2, ATIS, CSA, ETSI, IEEE, IETF, OASIS, ENISA, ICTSB, NISSG, RAISE Forum and other SDOs or consortia groups

- Consider work in relation with the implementation of WTSA-12 Resolutions 7, 11 and 50- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- Update the action plan- Provide concise summary of achievements for inclusion in SG17 report to relevant entities

Question 2/17 - Security architecture and framework- Carry out the responsibilities for Recommendations X.800, X.802, X.803, X.805, X.810, X.811,

X.812, X.813, X.814, X.815, X.816, X.830, X.831, X.832, X.833, X.834, X.835, X.841, X.842, X.843, X.1031, X.1032, X.1034, X.1035, X.1036, X.1037, and Supplements X.Suppl.2, X.Suppl.3, X.Suppl.15, and X.Suppl.16

- Review results of activities since the April 2013 SG17 meeting- Progress work on draft new Recommendation:

- X.gsiiso, Guidelines on security of the individual information service for operators- Progress work on draft new Supplement:

- X.mgv6, Supplement to ITU-T X.ipv6-secguide – Supplement on security management guideline for implementation of IPv6 environment in telecommunications organizations

- Develop a comprehensive set of security architecture and framework Recommendations for providing standard security solutions for telecommunications in collaboration with other standards development organizations and ITU-T study groups.

- Develop Recommendations on a trusted telecommunication network architecture that integrates advanced security technologies

- Consider work in relation with the implementation of WTSA-12 Resolutions 58 and 64- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- Consider efficient collaboration with other bodies including ISO/IEC JTC 1/SCs 27 and 37, IEC

TC 25, ISO TC 12, IETF, ATIS, ETSI, 3GPP, 3GPP2 and FIINA- Update summaries of draft revised and new Recommendations and draft Supplements- Update the action plan- Provide concise summary of achievements for inclusion in SG17 report to relevant entities.

Question 3/17 - Telecommunications information security management- Carry out responsibilities for Recommendations E.409 (in conjunction with SG2), X.1051,

X.1052, X.1054, X.1055, X.1056, and X.1057, and Supplement X.Suppl.13- Review results of activities since the April 2013 SG17 meeting- Progress work on draft new Recommendations:

- X.1051rev, Information technology – Security techniques – Information security management guidelines for telecommunications organizations based on ISO/IEC 27002

- X.gpim, Guideline for management of personally identifiable information for telecommunication organizations (in collaboration with Q10/17)

- X.sgsm, Information security management guidelines for small and medium telecommunication organizations

- Progress work on draft new Supplement:- X.sup1056, Supplement to ITU-T X.1056 – Related Recommendations, International

Standards and documents for security incident management- Assist Q2/17 in ongoing work on IPv6 including X.mgv6; assist Q8/17 in ongoing work on

X.cc-control


- 16 -

- Develop a framework of information security management functions described in Recommendation ITU-T X.1051

- Develop a methodology to construct information security management system (ISMS) for telecommunications organizations based on the existing standards (ISO/IEC and ITU-T).

- Develop a guideline to construct information security management for cloud computing.- Assess activities in view of usability for telecommunications facilities and services- Consider efforts in support of TDR/EW- Consider work in relation with the implementation of WTSA-12 Res. 58- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- Consider efficient collaboration with other bodies including ISO/IEC JTC 1/SC27, ETSI, TTC,

NIST and CSA- Update summaries of draft revised and new Recommendations and draft Supplements- Update the action plan- Provide concise summary of achievements for inclusion in SG17 report to relevant entities

Working Party 2/17 - Network and information security- Review and approve results from interim activities- Progress tasks related to implementation of WTSA-12 Resolutions, e.g., Res. 50, 52, 58- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17

Question 4/17 - Cybersecurity- Carry out responsibilities for Recommendations X.1205, X.1206, X.1207, X.1209, X.1303,

X.1500, X.1500.1, X.1520, X.1521, X.1524, X.1528, X.1528.1, X.1528.2, X.1528.3, X.1528.4, X.1541, X.1570, X.1580, X.1581, and Supplements X.Suppl.8, X.Suppl.9, X.Suppl.10, X.Suppl.18, and X.Suppl.20

- Review results of activities since the April 2013 SG17 meeting- Review report of the Correspondence Group on:

- Cybersecurity Information Exchange Capabilities- Consider the comments made by the USA at the April SG17 closing plenary on X.csi and the

results of TAP consultation and any contributions on determined draft new Recommendation and achieve approval:- X.1208 (X.csi), Guideline for cybersecurity index

- Finalize work and achieve determination of draft new Recommendations:- X.cybex-tp, Transport protocols supporting cybersecurity information exchange- X.maec, Malware attribute enumeration and classification- X.trm, Overview of traceback mechanisms

- Finalize work and achieve agreement on:- X.1500 Amd.4, Overview of cybersecurity information exchange – Amendment 4 – Revised

structured cybersecurity information exchange techniques- Progress work on draft new and revised Recommendations:

- X.1303 (revised), Common alerting protocol (CAP 1.2) (in collaboration with Q11/17)- X.bots, Centralized framework for botnet detection and response- X.cce, Common configuration enumeration- X.cee, Common event expression- X.cee.1, CEE architecture overview- X.cee.2, CEE dictionary and event taxonomy (CDET)- X.cee.3, CEE log syntax (CLS) encoding


- 17 -

- X.cee.4, CEE log recommendations (CELR) profile- X.csmc, An iterative model for cybersecurity operation using CYBEX techniques- X.cwss, Common weakness scoring system- X.cybex-beep, Use of BEEP for cybersecurity information exchange- X.eipwa, Guideline on techniques for preventing web-based attacks

- Collaborate with ITU-T study groups, ETSI, FIRST, IETF, IEEE, ISO/IEC JTC 1, OASIS, OMA, TCG, 3GPP, 3GPP2, and other standardization bodies on cybersecurity

- Work on frameworks and Recommendations to address how telecommunication/ICT providers may secure their infrastructure and maintain secure operations, and exchange cybersecurity information

- Contribute to improving terminology in the area of providing confidence and security in the use of ICT, including cybersecurity

- Produce a set of Recommendations for providing security solutions for telecommunication/ICT accountability and incident response

- Specify the security techniques and capabilities for service providers to coordinate and exchange information regarding vulnerabilities, platforms, cyber attacks, etc.

- Specify how to apply accountability and incident response mechanisms in telecommunication/ICT networks

- Develop guidelines and techniques to protect personal information and also to protect personally identifiable information (PII) using CYBEX techniques

- Provide assistance to other ITU-T study groups in applying relevant cybersecurity Recommendations for specific security solutions

- Develop best practices and guidelines for the sharing of vulnerability information and updates and patches to aid in vulnerability life-cycle processes

- Consider work in relation with the implementation of WTSA-12 Resolution 50- Coordinate with TSB for updating the reference website on cybersecurity organizations

pursuant to WTSA-12 Resolution. 58- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- Provide a consolidated, concise summary of achievements regarding WTSA-12 Res. 50- Update summaries of draft revised and new Recommendations and draft Supplements- Update the action plan- Provide concise summary of achievements for inclusion in SG17 report to relevant entities.

Question 5/17 - Countering spam by technical means- Carry out responsibilities for Recommendations X.1231, X.1240, X.1241, X.1242, X.1243,

X.1244, and X.1245, and Supplements X.Suppl.6, X.Suppl.11, X.Suppl.12, and X.Suppl.14- Review results of activities since the April 2013 SG17 meeting- Progress work on draft new Recommendations:

- X.tfcmm, Technical framework for countering mobile messaging spam- X.ticvs, Technologies involved in countering voice spam in telecommunication

organizations- Act as the lead group in ITU-T on technical means for countering spam, as spam is described by

Study Group 2- In support of WTSA-12 Resolution 52, assist TSB to initiate a study to survey ITU membership

on spam including sending a questionnaire to the ITU Membership –indicating the volume, types (e.g., email spam, SMS spam, spam in IP-based multimedia applications) and features (e.g., different major routes and sources) of spam traffic.


- 18 -

- Consider the results of the 8 July ITU workshop on countering and combating spam and identify any appropriate follow-on activities

- Identify and examine the telecommunication network security risks (at the edges and in the core network) introduced by the constantly changing nature of spam.

- Develop a comprehensive and up-to-date resource list of existing technical measures for countering spam in a telecommunication network that are in use or under development

- Determine whether new Recommendations or enhancement to existing Recommendations, including methods to combat delivery of unsolicited email, malware, and other malicious contents, and combat compromised network equipment, such as Botnets, would benefit efforts to effectively counter spam as it relates to the stability and robustness of the telecommunication network

- Provide regular updates to TSAG and to the TSB Director for use in in reports to Council.- Review related work in ITU-D Q.22/1- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- Consider efficient collaboration with other bodies including ETSI, IETF, ISO/IEC JTC 1,

OMA, 3GPP, 3GPP2, OECD,MAAWG, FIRST and NIST- Update summaries of draft revised and new Recommendations and draft Supplements- Update the action plan- Provide concise summary of achievements for inclusion in SG17 report to relevant entities.

Working Party 3 - Identity management and cloud computing security- Review and approve results from interim activities- Progress tasks related to implementation of WTSA-12 Resolutions, e.g., Res. 76- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- Perform the lead study group (LSG) responsibility for identity management, including updating

the LSG web page

Question 8/17 - Cloud computing security- Review results of activities since the April 2013 SG17 meeting- Review report of the Correspondence Group on:

- High-level security framework for cloud computing and cloud computing security collaboration

- Finalize work and achieve determination on draft new Recommendation:- X.ccsec, Security framework for cloud computing

- Progress work on draft new Recommendations:- X.cc-control, Information technology – Security techniques – Code of practice for

information security controls for cloud computing services based on ISO/IEC 27002- X.fsspvn, Framework for a secure service platform for virtual network (in collaboration

with Q7/17)- X.goscc, Guidelines of operational security for cloud computing- X.sfcse, Security functional requirements for Software as a Service (SaaS) application

environment- Assist Q10/17 in ongoing work on X.idmcc, and X.scim-use- Consider the results of the June TSAG meeting regarding areas of work on cloud computing

security between SG13 and SG17 and initiate appropriate follow-on activities- Consider results and take actions resulting from JCA-Cloud and joint meetings with Q8/13 and

the Working Party 2/13 for Q17/13, Q18/13, and Q19/13


- 19 -

- Develop Recommendations to identify security requirements and threats to secure cloud computing services based on the general requirements of cloud computing specified by ITU-T Study Group 13

- Develop Recommendations to define security architecture and to organize security functions based on the reference architecture specified by ITU-T Study Group 13

- Develop Recommendations or other type of documents to advance cloud computing security- Develop Recommendations to define a strong, flexible and elastic security management

architecture and implementation for cloud computing systems- Develop Recommendations to identify assurance mechanisms, audit technologies, risk

assessment with the objective of achieving trustworthy relationships within the cloud computing ecosystem

- Take charge of all SG17 activities on cloud computing security- Represent the work of Study Group 17 related to cloud computing security in the Joint

Coordination Activity on cloud computing (JCA-Cloud).- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- Consider efficient collaboration with other bodies including ISO/IEC JTC 1/SC7 (Study Group

on Service Oriented Architecture (SOA)), ISO/IEC JTC 1/SC27 and 38, IETF, OASIS, 3GPP, 3GPP2, OMA, ETSI, TM Forum

- Update summaries of draft new Recommendations- Update the action plan- Provide concise summary of achievements for inclusion in SG17 report to relevant entities.

Question 10/17 - Identity management architecture and mechanisms- Carry out responsibilities for Recommendations X.1250, X.1251, X.1252, X.1253, X.1254, and

X.1275, and Supplement X.Suppl.7- Review results of activities since the April 2013 SG17 meeting- Review reports of the Correspondence Groups on:

- Generic IdM interoperability mechanisms activities- IdM requirement in cloud computing activities- Open identity trust framework activities

- Finalize work and achieve approval of draft new Recommendation:- X.1255 (X.discovery), Framework for discovery of identity management information

- Finalize work and achieve determination of draft new Recommendations:- X.atag, Attribute aggregation framework- X.authi, Guideline to implement the authentication integration of the network layer and the

service layer- X.giim, Mechanisms to support interoperability across different IdM services- X.idmcc, Requirements of IdM in cloud computing (in collaboration with Q8/17)

- Progress work on draft new Recommendations:- X.iamt, Identity and access management taxonomy- X.idmts, Framework for the interoperable exchange of trusted services- X.mob-id, Baseline capabilities and mechanisms of identity management for mobile

applications and environment- X.oitf, Open identity trust framework- X.scim-use, Application of system for cross identity management (SCIM) in

telecommunication environments (in collaboration with Q8/13)


- 20 -

- Assist Q3/17 in ongoing work on X.gpim, assist Q7/17 in ongoing work on X.1141/Amd.1, X.1142/Amd.1, and X.xacml3, and assist Q11/17 in ongoing work on F.5xx, X.pki-em and X.pki.prof

- Address any coordination issues from JCA-IdM and identify any issues to report to the JCA-IdM

- Specify an IdM framework that supports discovery, policy and trust model, authentication and authorization, assertions, and credential lifecycle management required for IdM

- Define functional IdM architectural concepts to include IdM bridging between networks and among IdM systems taking into account advanced security technologies

- Specify requirements (and propose mechanisms) for identity assurance, and mapping/interworking between different identity assurance methods that might be adopted in various networks. In this context, identity assurance includes identity patterns and reputation

- Define interfaces for interoperability of IdM systems- Define requirements (and propose mechanisms) for protection and disclosure of identity

information- Define requirements (and propose mechanisms) to protect IdM systems including how to use

IdM capabilities as a means for service providers to coordinate and exchange information regarding cyber attacks

- Maintain and coordinate IdM terminology and definitions living list and to continue the on-going work

- Define IdM security risks and threats- Define the concept of “world ready” IdM framework- Define the concept of “developer ready” that is simple developer IdM framework to promote a

more viral adoption- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- Consider efficient collaboration with other bodies including ISO/IEC JTC 1/SCs 6, 27 and 37,

IETF, ATIS, ETSI, OASIS, Kantara Initiative, OMA, NIST, 3GPP, 3GPP2, Eclipse, InCommon, PRIME, OpenID Foundation, Shibboleth and CA/Browser Forum

- Review the collaboration status with ISO/IEC JTC 1/SC27/WG5 and with Kantara Initiative- Consider reactivating the development of a manual on identity management- Perform the lead study group (LSG) responsibility for identity management, including updating

the LSG web page- Update summaries of draft new Recommendations- Update the action plan- Provide concise summary of achievements for inclusion in SG17 report to relevant entities.

Working Party 4 - Application security- Review and approve results from interim activities- Progress tasks related to implementation of WTSA-12 Resolutions, e.g., Res. 78- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17

Question 6/17 - Security aspects of ubiquitous telecommunication services- Carry out responsibilities for Recommendations X.1101, X.1111, X.1112, X.1113, X.1114, X.1121,

X.1122, X.1123, X.1124, X.1125, X.1171, X.1191, X.1192, X.1193, X.1194, X.1195, X.1196, X.1197, X.1198, X.1311, X.1312, X.1313, and Supplement X.Suppl.19- Review results of activities since the April 2013 SG17 meeting- Progress work on draft new Recommendations:

- X.msec-7, Guidelines on the management of infected terminals in mobile networksITU-T\COM-T\COM17\COLL\002F.DOC

- 21 -

- X.msec-8, Secure application distribution framework for communication devices- X.sgsec-1, Security functional architecture for smart grid services using telecommunication

network- X.unsec-1, Security requirements and framework of ubiquitous networking

- Review the decision of the June TSAG meeting on default approval procedure for Q6/17 and adjust the work programme accordingly.

- Consider possible new work items in support of Intelligent Transport Systems (ITS) as part of the security aspects of ubiquitous telecommunication services.

- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- In collaboration with other ITU-T study groups and standards development organizations,

especially with IETF, ISO/IEC JTC 1/SCs 6, 25, 27 and 31, produce a set of Recommendations for providing comprehensive security solutions for secure ubiquitous telecommunication services

- Review existing Recommendations/Standards of ITU-T, ISO/IEC and other standardization bodies in the area of home network, smart grid, mobile network (including smartphone security), mobile IoT service and ubiquitous sensor network to identify security aspects needing standardization.

- Define security aspects of ubiquitous telecommunication services for a multi-vendor international ubiquitous environment, and for emerging new services

- Identify security issues and threats in secure ubiquitous telecommunication services- Develop security mechanisms for secure ubiquitous telecommunication services- Develop interconnectivity mechanisms for secure ubiquitous telecommunication services in a

single or multi-vendor ubiquitous environment- Consider including IPTV security Recommendations in future IPTV interop events.- Address any coordination issues from JCA-IPTV, JCA-SG&HN and JCA-IoT and identify any

issues to report to these JCAs- Consider efficient collaboration with other bodies including ISO/IEC JTC 1/SCs 6, 25, 27 and

31, IEC SMB WG3 and TC 57, IETF, 3GPP, 3GPP2, OMA, GSMA, ETSI, ATIS, TTC, TTA, CCSA, OIPF, DVB, NFC Forum and NIST

- Update summaries of draft revised and new Recommendations- Update the action plan- Provide concise summary of achievements for inclusion in SG17 report to relevant entities.

Question 7/17 - Secure application services- Carry out responsibilities for Recommendations X.1141, X.1142, X.1143, X.1151, X.1152, X.1153,

X.1154, X.1156, X.1161, X.1162, X.1164, and Supplement X.Suppl.17- Review results of activities since the April 2013 SG17 meeting- Review reports of the Correspondence Group on:

- Web mashup security activities- XACML (eXtensible Access Control Markup Language) activities

- Finalize work and achieve consent on draft new Recommendation:- X.xacml3, eXtensible Access Control Markup Language (XACML) 3.0 (in collaboration

with Q10/17)- Finalize work and achieve consent on draft Amendments to Recommendations:

- X.1141 Amd.1, Security Assertion Markup Language (SAML) 2.0 – Amendment 1: Errata (in collaboration with Q10/17)

- X.1142 Amd.1, eXtensible Access Control Markup Language (XACML 2.0) – Amendment 1: Errata (in collaboration with Q10/17)


- 22 -

- Progress work on draft new Recommendations:- X.p2p-3, Security requirements and mechanisms of peer-to-peer based telecommunication

network- X.sap-5, Guideline on local linkable anonymous authentication for electronic services- X.sap-7, Technical capabilities of fraud detection and response for services with high

assurance level requirements- X.sap-8, Efficient multi-factor authentication mechanisms using mobile devices- X.sap-9, Delegated non-repudiation architecture based on ITU-T X.813- X.websec-5, Security architecture and operations for web mashup services

- Assist Q8/17 in ongoing work on X.fsspvn, assist Q11/17 in ongoing work on X.cmail.- In collaboration with other ITU-T Study Groups and Standards Development Organizations,

especially with ISO/IEC JTC 1/SC 27, produce a comprehensive set of Recommendations for providing comprehensive security solutions for application communication services

- Review existing Recommendations/Standards of ITU-T and ISO/IEC in the area of secure application services

- Define security aspects of secure application services and for emerging new services.- Identify security issues and threats in secure application services.- Develop security mechanisms for secure application services- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- Consider efficient collaboration with other bodies including ISO/IEC JTC 1/SC 27 and 38,

IETF, OASIS, Kantara Initiative, ATIS, ETSI, W3C, OMA, IMPACT, ENISA, GCA, GSMA and COE


Question 9/17 - Telebiometrics

- Carry out responsibilities for Recommendations X.1080.1, X.1081, X.1082, X.1083, X.1084, X.1086, X.1088, X.1089, X.1090, X.1091, and X.1092

- Review results of activities since the April 2013 SG17 meeting- Progress work on draft new Recommendations:

- X.bhsm, Telebiometric authentication framework using biometric hardware security module (in collaboration with Q11/17)

- X.tam, A guideline to technical and operational countermeasures for telebiometric applications using mobile devices

- X.th2, Telebiometrics related to physics- X.th3, Telebiometrics related to chemistry- X.th4, Telebiometrics related to biology- X.th5, Telebiometrics related to culturology- X.th6, Telebiometrics related to psychology

- In support of WTSA-12 Resolution 78, consider an overall work programme for Q9/17 in the area of e-health

- Enhance and revise current Recommendations of telebiometric authentication and populate the telebiometric database

- Review the similarities and differences among the existing telebiometrics Recommendations in ITU-T and standards in ISO/IEC


- 23 -

- Develop security requirements and guidelines for any application of telebiometrics using architectures and frameworks including the ones developed under Q2/17

- Develop requirements for evaluating security, conformance and interoperability with privacy protection techniques for any application of telebiometrics

- Develop requirements for telebiometric applications in a high functionality network- Develop integrated frameworks and requirements of telebiometric architectures for cloud

computing services- Develop requirements of telebiometric authentication for trust identity framework- Develop requirements for appropriate generic protocols providing safety, security, privacy

protection, and consent “for manipulating biometric data” in any application of telebiometrics, e.g., e-health, tele-medicine, e-commerce, online-banking, video surveillance

- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- Consider efficient collaboration with other bodies including ISO/IEC JTC 1/SCs 17, 27, and 37,

ISO TCs 12, 68 and 215, IEC TC 25, IETF, IEEE, BIPM, WHO and ILO- Review the collaboration status with ISO/IEC JTC 1/SC27 (for security evaluation and testing

of biometric technology), with ISO/IEC JTC 1/SC37 (for biometrics standards), with ISO TC 12 (for physiological quantities and their units) and with IEC TC 25 for physiological quantities and their units


Working Party 5 - Formal languages- Review and approve results from interim activities- Progress tasks related to implementation of WTSA-12 Resolutions, e.g., Res. 76- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- Perform lead study group (LSG) responsibility for languages and description techniques,

including updating the LSG web page

Question 11/17 - Generic technologies to support secure applications- Carry out responsibilities for Recommendations E.115 (in conjunction with SG2), X.500,

X.501, X.509, X.511, X.518, X.519, X.520, X.521, X.525, X.530, X.660, X.662, X.665, X.666, X.667, X.668, X.669, X.670, X.671, X.672, X.674, X.680, X.681, X.682, X.683, X.690, X.691, X.692, X.693, X.694, X.695, and e-X.Imp 500

- Carry out maintenance responsibilities for E.104 (in conjunction with SG2), F.400, F.401, F.410, F.415, F.420, F.421, F.423, F.435, F.440, F.471, F.472, F.500, F.510, F.515, X.200, X.207, X.210 X.211, X.212, X.213, X.214, X.215, X.216, X.217, X.217bis, X.218, X.219, X.220, X.222, X.223, X.224, X.225, X.226, X.227, X.227bis, X.228, X.229, X.233, X.234, X.235, X.236, X.237, X.237bis, X.245, X.246, X.247, X.248, X.249, X.255, X.256, X.257, X.260 X.263, X.264, X.273, X.274, X.281, X.282, X.283, X.284, X.287, X.400, X.402, X.404, X.408, X.411, X.412, X.413, X.419, X.420, X.421, X.435, X.440, X.445, X.446, X.460, X.462, X.467, X.481, X.482, X.483, X.484, X.485, X.486, X.487, X.488, X.610, X.612, X.613, X.614, X.622, X.623, X.625, X.630, X.633, X.634, X.637, X.638, X.639, X.641, X.642, X.650, X.851, X.852, X.853, X.860, X.861, X.862, X.863, X.880, X.881, X.882, X.891, X.892, X.893, X.901, X.902, X.903, X.904, X.906, X.910, X.911, X.920, X.930, X.931, X.950, X.952 and X.960

- Review results of activities since the April 2013 Study Group 17 meeting- Consider possible actions resulting from WTSA-12, PP-10, WTDC-10, TSAG and GSC-17- Update summaries of draft revised and new Recommendations- Update the action plan


- 24 -

- Provide concise summary of achievements for inclusion in SG17 report to relevant entities

Directory services, Directory systems, and public-key/attribute certificates- Collaborative meeting with ISO/IEC JTC 1/SC 6/WG 8 (Directory)- Progress work on draft new Recommendations:

- F.5xx, Directory Service – Support of Tag-based Identification Services (in collaboration with Q10/17)

- X.500 (eighth edition), Information technology – Open Systems Interconnection – The Directory: Overview of concepts, models and services

- X.501 (eighth edition), Information technology – Open Systems Interconnection – The Directory – Models

- X.509 (eighth edition), Information technology – Open Systems Interconnection – The Directory – Public-key and attribute certificate frameworks

- X.511 (eighth edition), Information technology – Open Systems Interconnection – The Directory – Abstract Service Definition

- X.518 (eighth edition), Information technology – Open Systems Interconnection – The Directory – Procedures for Distributed Operations

- X.519 (eighth edition), Information technology – Open Systems Interconnection – The Directory – Protocols

- X.520 (eighth edition), Information technology – Open Systems Interconnection – The Directory – Selected Attribute Types

- X.521 (eighth edition), Information technology – Open Systems Interconnection – The Directory – Selected object classes

- X.525 (eighth edition), Information technology – Open Systems Interconnection – The Directory – Replication

- X.cmail, Certified mail transport and certified post office protocols (in collaboration with Q7/17)

- X.orf, OID-based resolution framework for heterogeneous identifiers/locators- X.pki-em, Information Technology - Public-Key Infrastructure: Establishment and

maintenance (in collaboration with Q10/17)- X.pki-prof, Information Technology - Public-Key Infrastructure: Profile (in collaboration

with Q10/17)- Assist Q9/17 in ongoing work on X.bhsm- Identify new directory requirements in support of new and current technologies- Complete the work on Communication enhancement for the Directory with the objective to

improve the interworking capabilities with LDAP and to extend the support for other encoding rules than BER

- Continue work on Directory Support for IdM for the Directory with the objective to adapt X.509 to new requirements

- Develop new editions of E.115 to cope with future directory assistance service requirements- Consider any received defect reports and progress any necessary technical corrigenda, including

updates to the web-based Directory Implementers' Guide- To initiate work on how to deploy Public-Key Infrastructure (PKI) in different environment- Work with RFID standards organization further to improve the RFID support- Follow the work on biometric certificates- Provide guidance to relevant groups on the use of directories- Consider efficient collaboration with other bodies including ISO/IEC JTC 1/SCs 6 and 27,

IETF, and OASIS


- 25 -

Abstract Syntax Notation One (ASN.1), Object Identifiers (OIDs) and associated registration- Collaborative meeting with ISO/IEC JTC 1/SC 6/WG 9 on ASN.1, OIDs, and registration

authorities- Address anticipated defect reports on ASN.1- Assist Q4/17 in ongoing work on X.1303- Provide input to WP5/17 regarding the LSG report to TSAG on languages and description

techniques and update of the LSG web page- Collaborate with ITU-T SG2 in the development on any innovative use of object identifiers.- Provide updated Recommendations for X.660-, X.670-, X.680- X.690- and X.890-series

throughout the study period in response to user needs, producing new editions when appropriate- When there is a need to improve data transfer, assist other Questions in all study groups in the

provision of ASN.1 modules equivalent to XML schemas defined in ITU-T Recommendations (existing or under development), particularly in low bandwidth situations

- Develop any additional tutorials or web pages that are likely to assist users of ASN.1 or OIDs.- Obtain agreement in ISO/IEC JTC 1/SC 6 and SG17 on any additional OID allocations that are

considered necessary- Under the responsibility of the ASN.1 Project Leader:

Provide general advice to users on ASN.1; Promote the use of ASN.1 within other study groups and external standards development

organizations (SDOs);- Under the responsibility of the OID Project Leader:

Provide general advice to users of OIDs; Promote the use of international OIDs within other study groups and external standards

development organizations (SDOs); Help countries with the establishment and maintenance of national registration

authorities for OIDs (including international OIDs).- Review and update as necessary the information on SG17 web page concerning OID project,

ASN.1 project, ASN.1 Module Database, and Object Identifiers (OIDs) and Registration Authorities, including the ITU web page on emerging trends

- Consider efficient collaboration with other bodies including ISO/IEC SCs that use ASN.1 or OIDs, OMG, IETF, W3C and OASIS

Open Distributed Processing maintenance- Progress work in collaboration with ISO/IEC JTC 1/SC 7/WG 19 on revision of

Recommendations:- X.906, Open distributed processing – Use of UML for ODP system specification- X.911, Open distributed processing – Reference model – Enterprise language

- Develop corrections or enhancements to ODP Recommendations, as needed, based on received contributions and to resolve any reported defects

- Identify what additional work on ODP should be pursued taking into account ongoing work in ISO/IEC JTC 1/SC 7 and in OMG

- Consider efficient cooperative work with ISO/IEC JTC 1/SC7/WG19

Open Systems Interconnection (OSI) maintenance- Develop corrections or enhancements to OSI Recommendations, as needed, based on received

contributions and to resolve any reported defects- Maintain the OSI Implementers' Guide


- 26 -

Question 12/17 - Formal languages for telecommunication software and testing- Carry out responsibilities for Recommendations (X.290, X.291,) X.292, (X.293, X.294, X.295,

X.296,) Z.100, Z.101, Z.102, Z.103, Z.104, Z.105, Z.106, Z.107, Z.109, Z.110, Z.111, Z.119, Z.120, Z.121, Z.150, Z.151, (Z.160.1, Z.161.1, Z.161.2, Z.161.3, Z.161.4, Z.162, Z.163, Z.164, Z.165, Z.165.1, Z.166, Z.167, Z.168, Z.169, Z.170), Z.200, Z.400, Z.450, (Z.500), Z.600, Z.601, Supplements (X.Suppl.4, X.Suppl.5,) Z.Suppl.1, and Z.Imp100Notes:ITU-T Z.160/170 series of Recommendations currently in SG11, expected transfer to Q12/17 pending TSAG endorsement.ITU-T X.290-series (except X.292), X.Suppl.4, X.Suppl.5, and Z.500-series currently in SG17, expected transfer to SG11 pending TSAG endorsement.

- Review results of activities since the April 2013 Study Group 17 meeting- Consider work in relation with the implementation of WTSA-12 Resolution 76- Consider possible actions resulting from WTSA-12, WTDC-10, PP-10, TSAG and GSC-17- Consider efficient collaboration with other bodies including ISO/IEC JTC 1, ETSI, OMG, IETF

and SDL Forum Society- Update summaries of draft revised and new Recommendations- Update the action plan- Provide concise summary of achievements for inclusion in SG17 report to relevant entities

System Design Languages- Maintain the ITU system design languages under this Question by providing updated

Recommendations and other documents throughout the study period in response to user needs, producing new editions when appropriate with direction of the effort towards relative stability of the languages but with improved usability

- Identify and if needed adopt other relevant requirements, specification, implementation and testing languages as ITU-T Recommendations taking into account Z.110, and review the Recommendations under study to determine if any of them are no longer needed and can be deleted.Specification and Description Language (SDL)- Finalize work and achieve consent on revision of:

- Z.100 Annex F1 (revised), Specification and Description Language - Overview of SDL-2010 – SDL formal definition: General overview

- Z.100 Annex F2 (revised), Specification and Description Language - Overview of SDL-2010 – SDL formal definition: Static semantics

- Z.100 Annex F3 (revised), Specification and Description Language - Overview of SDL-2010 – SDL formal definition: Dynamic semantics

- Z.109 (revised), Specification and Description Language – Unified modeling language profile for SDL-2010

- Maintain a master list of corrections of the current version of specification and description language Recommendations as an Implementers' Guide

- Assist in the maintenance of Recommendations ITU-T Z.111 and Z.119.- Issue new versions of Z.100-series (Z.100 to Z.107) Recommendations as and when

needed.- Continue study of new uses of specification and description language, especially in

conjunction with other languages in particular in relation to integration in a UML framework.


- 27 -

Message Sequence Chart (MSC)- Maintain a master list of corrections of the MSC Recommendations as an Implementers'

Guide.- Issue new versions of Z.120-series Recommendations as and when needed.- Continue study of message sequence chart uses, especially in conjunction with other

languages.

User Requirements Notation (URN)

- Maintain a master list of corrections of the URN Recommendations as an Implementers' Guide.

- Issue new versions of Z.150-series Recommendations as and when needed.

- Assist in the maintenance of Recommendations ITU-T Z.111 and Z.119.

- Continue study of URN uses, especially in conjunction with other languages.

Methodologies for using formal system design languages- Finalize work and achieve agreement on revision of:

- Z.100 Supplement 1, Supplement 1 to Z-series Recommendations – ITU-T Z.100-series – Supplement on methodology on the use of description techniques

- Consider the need for new methodologies and frameworks or updates to Z.110, Z.400, Z.450, Z.600, Z.601 and Z.Suppl.1 that are adapted to further contemporary user requirements and emerging new architectures and frameworks to ensure the creation of good quality Recommendations and systems

- Consider what tutorial activity, databases or other efforts are needed to support and promote the use of formal languages in a variety of environments, especially ITU-T study groups

Framework and profiles for unified modeling language (UML)

- Identification of requirements and manner on the joint use of UML and Z-series languages.- Compiling input for the further development of UML to be communicated to OMG.- Coordination of common concepts (e.g., time), tools (e.g., meta-grammars), and

definitional strategies between the system design languages.- Maintain the guidelines on use of formal languages (Recommendation ITU-T Z.110), how

to define the grammars for ITU-T languages (Recommendation ITU-T Z.111), how to develop UML profiles (Recommendation ITU-T Z.119) and quality issues (Recommendation ITU-T Z.400, Recommendation ITU-T Z.450).

Software Quality and Architecture- Assess need for Recommendations ITU-T Z.400, Z.600 and Z.610.- If any of Recs. ITU-T Z.400, Z.600 or Z.610 is not needed, initiate withdrawal of the

Recommendation.

Testing Languages

- Progress work in the area of TTCN-3.- Progress work on testing languages and conformance testing based on formal models.- Consider extending the TTCN-3 notation to allow expanded use of ISO/IEC 10646

characters, with the possible exception of keywords.

______________
